Cysic cross-chain bridge exploited for unauthorized minting of 10 million CYS, bridge paused

Decentralized computing network Cysic disclosed on X that its cross-chain bridge was attacked on Saturday: the attacker exploited a processing vulnerability to mint 10 million CYS on BNB Smart Chain without authorization. The cross-chain bridge has now been paused. Preliminary investigation indicates that the attacker gained unauthorized access to the database supporting the cross-chain bridge. According to reports, the minting occurred at 12:31:38 UTC, and Cysic blacklisted the receiving address in the token contract at 13:47:52; at that time, the address still held approximately 2.8 million CYS, and related transfers have been restricted. Cysic stated that this incident only involved the message processing and minting components of the cross-chain bridge, the mainnet and other operational systems were unaffected, and CYS or other assets already in user wallets were not harmed.